SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-37984)

Sales and Inventory System is a business resource planning system for sales and inventory management developed by itsourcecode. The Sales and Inventory System has a SQL injection vulnerability. This vulnerability arises from the failure of the /pages/prosearchfrm.php file to properly validate the...

CVE-2026-86309

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/prosearchfrm.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

CVE-2026-86309 itsourcecode Sales and Inventory System pro_searchfrm.php sql injection

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/prosearchfrm.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

EUVD-2026-72410

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/prosearchfrm.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

CVE-2026-86309 itsourcecode Sales and Inventory System pro_searchfrm.php sql injection

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/prosearchfrm.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

CVE-2026-86309

itsourcecode Sales and Inventory System 1.0 is vulnerable to SQL injection via the ID argument in the file /pages/pro_searchfrm.php . The attack can be initiated remotely with low privileges and no user interaction, resulting in low impact on confidentiality, integrity, and availability (CVSS 3.1...

CVE-2026-86309: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/prosearchfrm.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...